This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
File:                     au6rXTwAHVetswh4EhecgpIouCE.mft (raw, json)
Hash identifier:          ULf5eXiieb0z/e4yLkk3+kyqF3U9XOb3PNdjp1ubvJs=
Subject key identifier:   3A:93:56:1A:9D:19:DB:30:3B:57:79:D4:A4:5D:FE:EC:C7:E8:4E:2E
Authority key identifier: 6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21
Certificate issuer:       /CN=6aeeab5d3c001d57adb3087812179c829228b821
Certificate serial:       019B2740D4AE29AC13E5DD407BA5734FB76C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
Manifest number:          177A
Signing time:             Tue 16 Dec 2025 13:01:58 +0000
Manifest this update:     Tue 16 Dec 2025 13:01:58 +0000
Manifest next update:     Wed 17 Dec 2025 13:01:58 +0000
Files and hashes:         1: au6rXTwAHVetswh4EhecgpIouCE.crl (hash: 4KEEHyxh4+Ch34bFnVhdGBYBLOXVW85XvgOwU8Qe8t0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 13:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:40:d4:ae:29:ac:13:e5:dd:40:7b:a5:73:4f:b7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aeeab5d3c001d57adb3087812179c829228b821
        Validity
            Not Before: Dec 16 13:01:58 2025 GMT
            Not After : Dec 17 13:01:58 2025 GMT
        Subject: CN=3a93561a9d19db303b5779d4a45dfeecc7e84e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:45:5d:16:69:09:a1:d5:0b:fd:29:71:d1:
                    be:1a:da:e3:ca:f6:db:47:98:e0:3b:b5:86:46:08:
                    d2:40:1a:8a:8a:c7:5e:ef:42:76:c6:1a:97:62:b3:
                    6d:a0:06:9e:5f:bc:77:9f:d4:ac:b6:84:f4:c2:e7:
                    7f:16:92:c2:aa:6c:2f:ff:7b:36:64:3b:e7:14:c6:
                    fe:81:cd:d8:a0:5e:cd:0f:d8:ad:d5:9c:f2:d5:4a:
                    1f:88:28:db:0c:26:2c:a6:09:f1:bc:11:9d:ef:a9:
                    20:6d:38:bf:a0:1d:3a:db:70:82:c0:05:35:f3:6f:
                    77:ce:53:c2:4a:a2:c4:bf:88:74:7a:c7:cb:9b:04:
                    f0:3c:33:43:16:43:cb:9f:bf:dc:c5:13:73:75:9c:
                    21:ab:b1:05:f9:62:08:e8:2d:68:e4:08:56:c8:5a:
                    d8:1b:0c:55:0d:c1:4a:1b:38:6d:3c:96:0d:46:03:
                    b3:b0:2c:df:13:58:8e:52:c1:51:4a:0d:21:4b:35:
                    65:6d:b8:07:0e:54:59:08:26:62:66:b1:a7:8b:4c:
                    a2:9b:16:2c:c3:30:b2:8c:67:f8:31:2c:21:79:3e:
                    1a:95:90:c6:66:40:64:47:34:ec:7f:0f:e9:d8:ad:
                    59:70:18:84:0c:c5:20:84:ec:a6:2d:2e:a2:20:a8:
                    ca:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:93:56:1A:9D:19:DB:30:3B:57:79:D4:A4:5D:FE:EC:C7:E8:4E:2E
            X509v3 Authority Key Identifier:
                keyid:6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e2:57:a6:23:a0:a1:3a:1e:80:d0:f8:5f:97:25:cc:60:2d:
         3a:0c:c5:88:72:fe:92:4c:4b:2e:ff:32:d2:43:9c:1f:a0:63:
         93:9d:16:a5:fb:5d:6e:8a:67:1a:a5:ef:02:05:36:00:c4:5e:
         4b:f3:23:a3:d8:8b:cd:00:d9:10:76:9e:7d:55:32:4d:e0:48:
         95:39:2c:07:ce:ba:f8:38:89:dd:78:8e:5e:30:ee:1d:03:4f:
         fd:e6:b2:55:ac:93:d6:e7:a4:b2:d2:e9:69:e9:0f:01:26:9e:
         2c:db:2f:8e:02:6e:0f:6f:1f:16:fa:27:1b:5c:26:8b:fa:f6:
         46:c1:53:91:79:d8:5a:c0:db:78:60:bc:86:75:91:eb:c4:c6:
         f2:b7:e9:d1:13:46:28:5b:8f:16:5c:24:f6:46:6a:90:2a:c5:
         87:5a:9f:72:bb:d7:a1:c9:1b:72:41:b7:cd:7a:e0:0c:4d:5b:
         bf:94:3f:e6:31:96:bd:8b:3d:ff:51:bf:82:a5:92:99:27:bd:
         db:8a:e4:43:88:a2:2d:2a:fa:28:12:b1:d2:87:a6:f4:2e:b6:
         40:68:49:a7:e6:d5:f9:f2:c5:5c:5e:66:91:48:a1:14:2a:06:
         5f:35:03:6e:7f:12:a3:8a:ec:e8:01:44:f8:8c:78:1f:45:ef:
         6d:1c:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 22:33:31 2025 by rpki-client